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LISTING OF THE CLAIMS: 

1 . (Cujnrently Amended): A server system that processes an incoming request for 
information from a user over a network, the server system comprising: 

one or more source servers that store the information; 

a first server, communicatively coupled to the one or more source servers and to 
the network^;]]* that receives the incoming request from the network; and 

the first server testing the [[the]] incoming request for [[an]] indicia contained 
within the request that the request is not propo r valid for the one or more source servers 
to respond to the request, wherein the indicia includes a particular IP address in a context 
of prior requests, and wherein the context of prior requests is based on a number of 
requests for information from the particular IP address in a particular amount of time, and 
passing the incoming request to the one or more source servers when the incoming 
request is valid. 

2. (Currently Amended): The server system of claim 1 , the one or more source 
servers transmitting information to the first server in response to the incoming request; 
and 

the first server retransmitting the information to the user. 

3. (Currently Amended): The server system of claim 1 A wherein the first server does 
not pass the incoming request to the one or more source servers when the incoming 
request [[is an]] contains indicia that the request is not prop e r valid for the one or mogc 
source servers to respond to the request, 

4. (Currently Amended): The server system of claim l a wherein an incoming 
request is d e temined determined to be not prop e r valid when tho whon the request is for 
access to a particular resource. 

5. (Currently Amended): A computing system that prcprocesses and monitors 
incoming requests for information from a user over a network, the information stored on 
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one or more source servers communicatively coupled to the computing system, the 
computing system comprising: 

a network input port that receives the incoming request; 

a source server port, communicatively coupled to the one or more source servers, 
that transmit s the information to and from the one or more source servers; 

[[a]] an intrusion detection mechanism communicatively coupled to the network 
input port; 

the intrusion detection mechanism receiving the incoming request from the 
network and checking the [[the]] incoming request for indicia of an improp e r invalid 
request from information associated with the incoming reques t, wherein the information 
associated with the incoming request includes a predetermined maximum number of 
requests by a particular IP address in a particular amount of time: and 

the intrusion detection mechanism transmitting the incoming request to the one or 
more source servers when the indicia associated with the incoming request [[is]] are 
valid. 

6. (Currently Amended): The computing system of claim 5. the one or more source 
servers transmitting information to the source server port in response to the incoming 
request; and 

the system retransmitting the information to the user. 

7. (Currently Amended): The computing system of claim 5 A wherein the intrusion 
detection mechanism docs not pass the incoming request to the one or more source 
servers when the incoming request has [[an]] indicia that it is not proper invalid . 

8. (Currently Amended): The computing system of claim 5 a wherein an incoming 
request has [[an]] indicia that it is not proper invalid when requesting access to a 
particular resource. 
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9. (Currently Amended): A method for preprocessing an incoming request for 
information from a user over a network, the information stored on one or more source 
servers communicatively coupled to a computing system, the method comprising: 

receiving the incoming request on the computing system; 

detennining if the incoming request [[is]] has indicia of not being proper, wherein 
the indicia associat e d with the incoming request includes a particular IP address in a 
context of prior req uests, and wherein the context of prior requests is based on a number 
of requests for infor mation from the particular IP address in a particular amount of time : 
and 

selectively not transmitting the incoming request to the one or more source 
servers when the incoming request [[is]] contains indicia of not being proper. 

10. (Currently Amended): The method of claim. 9, wherein the determining step of 
dctormhiift g is performed by a software resident on the computing system. 

1 1 . (Currently Amended): The method of claim 9 A further comprising: 
transmitting the information from the one or more source servers to the computer 

system in response to the incoming Tequest; and 

the computing system retransmitting the information to the user. 

12. (Currently Amended): The method of claim 9 a wherein [[an]] the incoming 
request [[is]] contains indicia of not being proper when requesting access to a particular 
resource. 

1 3. (Currently Amended): A computer program product on a computer usable 
medium, the computer usable medium having [[a]] computer usable program code 
embodied therein for preprocessing an incoming request for information from a user over 
a network, the information stored on one or more source servers communicatively 
coupled to a computing system, the computer usable program code including: 

firat instructions for receiving the incoming request on the computing system; 
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second instructions for determining if the incoming request contains indicia of not 
being prope r, wherein the indicia includes a particular IP address in a context of prior 
requ ests, and wherein the context of prior requ ests is based on a number of requests for 
information from the particular IP address in a particular amount of time : and 

third instructions for selectively transmitting the incoming request to the one or 
more source servers when the incoming request contains indicia of being proper. 

14. (Currently Amended): The computer prograro product of claim 1 3 a wherein the 
second instructions for dotcrmining are performed by a software resident on the 
computing system. 

15. (Currently Amended): The computer program product of claim 1 3 A further 
comprising: 

fourth instructions for transmitting the uifortnation from the one or more source 
servers to the computer system in response to the incoming request; and 

the computing syst e m having fifth instructions for retransmitting the information 
to the user. 

16. (Currently Amended): The computer program product of claim 13 A wherein [[an]] 
the incoming request is invalid when requesting access to a particular resource. 

1 7. (Currently Amended): A server system that processes an incoming request for 
information from a user over a network, the server system comprising: 

one or more source servers that store the information; 

a first server, communicatively coupled to the one or more source servers and to 
the nctwork[[;]] A that receives the incoming request from the network; and 

the first server detecting an intrusion [[of|] by the incoming request in tha contex t 
of prior requ e sts and based on indicia of the incoming request being proper improper . 
such indicia being associat e d with th e incoming r e qu e st wherein the indicia includes a 
particular IP address in a context of nrior requests, and wherein the context of prior 
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requests is based on a number of requests for information from the particular IP address 
in a particular amount of timelT J1: and 

the first server passing the incoming request to the one or more source servers 
when the indicia associated with the incoming request indicates that the incoming request 
is proper. 

1 8. (Currently Amended): The server system of claim 1 7 ? wherein the context of 
prior requests comprises requests for the same information. 

1 9. (Currently Amended): The server system of claim 1 7, wherein the context of 
prior requests comprises requests for different information from a common computing 
device coupled [[over]] to the network. 

20. (Currently Amended): The server system of claim 17, wherein the context of 
prior requests is based on a number of requests for the sam e information. 

21-22. (Canceled) 
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